Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would appreciate any advice from experience from the community regarding the following challenge I've given myself - i.e. any pointers re best approach / direction here?


  1. Allow collection / real-time-monitoring of network usage from a users Windows PC to a specific set of IP addresses (or DNS names), on a per application/process running on the PC point of view, differentiating between "up" and "down" traffic. For example: show how much network traffic has been used (sending to the configured set of IP addresses/DNS names) for each PC process/application for the day so far.

  2. Solution should run on the PC that the user is utilising (i.e. not require setup of software on a separate PC)

  3. For Windows PC (e.g. XP, Vista, Windows 7)

  4. Shouldn't cause noticeable performance hit for the users (e.g. slow down internet browsing)

  5. Would want the data collected stored on the PC in a manner that a GUI program (e.g. C# WPF app) could access for displaying to user.

share|improve this question
up vote 0 down vote accepted

I've gone with, which uses WinPCap.

share|improve this answer
For a gui to analyse your capture either post capture or in real time you can use WireShark. It can either be the gui for winpcap or just load a pcap file after it's been captured with winpcap. – 3dinfluence Aug 18 '10 at 1:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.